# Deny direct web access to config and library internals
<FilesMatch "^(config\.php|schema\.sql)$">
  Require all denied
</FilesMatch>
<IfModule mod_rewrite.c>
  RewriteEngine On
  # block direct access to /lib
  RewriteRule ^lib/ - [F,L]
</IfModule>
